better visibility of ALLOWED or DENIED in login examples, fix routing to wait for route completes