Hi Arnaud, Why don't you use default/user/login and set auth.settings.login_next=URL(a='helloworld',c='admin',f='index'), in that case, when login fails there is no need to redirect. When you need a custom Invalid login message just set: auth.messages.invalid_login='your customized message'
Kind regards, Annet.

