shows error on bad login and redirects