Better feedback on failure cases during login

This includes:
 - displaying the list of upstream providers on failed password logins
 - showing a proper 'account deactivated' or 'account locked' page
 - show the generic error page on 500-like errors

Author: sandhose