added password error to login page, edited logic in user_controller for post_login to include validating password