#38 - using the cookies to show login error msg instead of GET param