Handle login validation in colander

This is a step toward weaning off the horus views.

Close #1660
Merge pull request #1669 from hypothesis/1660-activation-error-reporting

Handle login validation in colander