--- a/web/views/basetemplates.py	Mon Feb 29 17:07:56 2016 +0100
+++ b/web/views/basetemplates.py	Thu Jun 23 15:48:39 2016 +0200
@@ -510,8 +510,10 @@
                 stitle = u' '
             w(u'<div class="loginTitle">%s</div>' % stitle)
         w(u'<div class="loginContent">\n')
-        if showmessage and self._cw.message:
-            w(u'<div class="loginMessage">%s</div>\n' % self._cw.message)
+        # don't call self._cw.message twice since it pops the id
+        msg = self._cw.message
+        if showmessage and msg:
+            w(u'<div class="loginMessage">%s</div>\n' % msg)
         config = self._cw.vreg.config
         if config['auth-mode'] != 'http':
             self.login_form(id) # Cookie authentication