--- a/web/application.py	Wed May 26 11:01:50 2010 +0200
+++ b/web/application.py	Wed May 26 12:31:34 2010 +0200
@@ -379,6 +379,8 @@
                     controller = self.vreg['controllers'].select(ctrlid, req,
                                                                  appli=self)
                 except NoSelectableObject:
+                    if ctrlid == 'login':
+                        raise Unauthorized(req._('log out first'))
                     raise Unauthorized(req._('not authorized'))
                 req.update_search_state()
                 result = controller.publish(rset=rset)