normalize and fix login templates some more; still don't like form validation