Closes #14, adds login errors and redirect to internal admin/* if attempted before auth'd