Mark links to the login page as rel="nofollow" so that search crawlers don't constantly try to crawl it. Otherwise the fact the login url is different on every page (/login?url=<current_url>) confuses crawlers. Also strip the url param from the canonical url (<link rel="canonical">) on the login page.