better login message
attributes with multiple values correctly handled