Removed get parameter when coming back to login after forgot. Changed mock to return 403 Forbidden on invalid login to match current backend behaviour.