Username of init data changed to be valid with client validations
Security changed to make the authentication as interceptor and login failure redirects to current page.