handle bad logins better by redirecting back to the login page
[#5]
finally got the behavior that i wanted
[#5]