Fixed login form to use redir() instead of hardcoded header() call.