`<Login>` doesn't reject logins when user not found by BE

[jdmedlock]

The <Login> component doesn't stop when the BE login mutation returns null, which indicates the user was not found.