Disable login button during user/pass verification

Also, remove 'loginlogin' in the URL after failed login