Fixed NPE in LoginCtrl when balloon cookie is set but user credentials are wrong