login form can now handle invalid submissions
valid login works
newly-added users immediately logged in
"Remember me" default enabled; working on checkbox for opt-out
Finish log in/log out