tweaking messages and status codes for user login
add a bunch of tests for htpasswd