login with empty credentials throws a persistent error