I can authenticate with the wrong username and password

[beekley]

On the first attempt, the interface doesn't stop me if I type in invalid credentials. This may cause problems since I won't have a valid cookie when I try to POST the endpoint definition.