Keep last attempted login username if login fails
Don't auto send users to path until we have a list of valid paths