feat: enhance login flow with state-based attempt cookies and improve error handling