login message assertions and (hopefully final) exception catching