Allow candy admin to display initial message on login form

Builds on PR #303, adds core option `initialMessage` which is displayed at top of login form when user first presented with it.  This message will be replaced by 'login failed' as appropriate.

Intended for things like link to Ts & Cs and/or special information relating to fixed domains (PR #303).