Version Bump to HAPI 2.0 + valid redirect to / on loginfail.

Also: Giving the login proccess some time to fire for not letting the
users guess which part of a login proccess failed exactly.