Made some tweaks to the ajax login javascript. Cleared the inputs on failure so someone won't repeatedly try a bad login. Redirect on lockout so the page will refresh. Set focus on the username box after failure for convenience.

Dear {{ to_name }},

Your friend, {{ sender_name }}, wanted to send you a link to an 
interesting story found on {{ site_name }}.

{{ story_title|safe }}
http://{{ site_url }}{{ story_link }}

Thanks!
http://{{ site_url}}