validate login form TODO: is there a difference between returning false or null?
CTForm
$form
boolean