auth: display login errors with redirection and flash messages