Added disabled-account handling. Refactored logged-in-page authentication and interstitial management a bit.