web: dont move the controls if login fails. Fixes #672