diff -r 3e69bccc2022 -r 4482e94daabe web/views/basetemplates.py
--- a/web/views/basetemplates.py	Thu Jun 16 17:45:16 2016 +0200
+++ b/web/views/basetemplates.py	Tue Jun 21 07:44:35 2016 +0200
@@ -508,8 +508,10 @@
                 stitle = u' '
             w(u'<div class="loginTitle">%s</div>' % stitle)
         w(u'<div class="loginContent">\n')
-        if showmessage and self._cw.message:
-            w(u'<div class="loginMessage">%s</div>\n' % self._cw.message)
+        # don't call self._cw.message twice since it pops the id
+        msg = self._cw.message
+        if showmessage and msg:
+            w(u'<div class="loginMessage">%s</div>\n' % msg)
         config = self._cw.vreg.config
         if config['auth-mode'] != 'http':
             self.login_form(id) # Cookie authentication