Basic client-side authentication bits working
If no explicit state to go to after login, redirect to root path
Bug fix - display validation messages