diff -r a4fcee1e9789 -r 2cc16363d6a3 web/views/basetemplates.py
--- a/web/views/basetemplates.py	Thu Mar 24 09:43:25 2016 +0100
+++ b/web/views/basetemplates.py	Tue Jun 21 07:42:30 2016 +0200
@@ -508,8 +508,10 @@
                 stitle = u' '
             w(u'<div class="loginTitle">%s</div>' % stitle)
         w(u'<div class="loginContent">\n')
-        if showmessage and self._cw.message:
-            w(u'<div class="loginMessage">%s</div>\n' % self._cw.message)
+        # don't call self._cw.message twice since it pops the id
+        msg = self._cw.message
+        if showmessage and msg:
+            w(u'<div class="loginMessage">%s</div>\n' % msg)
         config = self._cw.vreg.config
         if config['auth-mode'] != 'http':
             self.login_form(id) # Cookie authentication