feat: #415908 Show an inline login form error instead of redirecting
Denied logins now fail validation on the login form with the configured message instead of authenticating the user and signing them out on the next request. The error page redirect only applies to users signed out mid-session, and defaults to the login page so the message is seen.
#ai-assisted
Closes #415908