more robust login request handling

fail early in case of some typical error scenarios
allow omitting ABE config block

(no config required for passthrough ABE module)