login: preserve input value after failure