fixed bad new user redirect and added handler for bad login