def mob_login(fn):
    def decorated(*arg,**kw):
        if identity.current.anonymous or not identity.in_group('active'):
            msg=None
            if not identity.current.anonymous and not identity.in_group('active'):
                msg='sorry your account is not active yet'
            return dict(tg_template="cheetah:chrss.templates.mobile.login",user='',msg=msg)
        # strip out user and pwd params
        # as some phones (e.g. Nokia 6300)
        # seem to do a post after the redirect from logging
        # in and we end up with extra params attached to the request
        kw.pop('user',None)
        kw.pop('pwd',None)
        return fn(*arg,**kw)
    return decorated