fixed user login page to only display error if both username and password are provided