BUGFIX: ucc login is not validated

FIXED: session variables are now cleared after a failed login, to prevent the user to access the user pages.