add login page, show error message when login fails, write test for login failure