now handling login/reg failure, #37