Silence the email when the certificate does not verify, we tell the user

that and point them to the Geni portal to fix it.

www/aptui/geni-login.ajax

@@ -119,7 +119,10 @@ function Do_CreateSecret()
     #
     if (VerifyLocalUser(null, $certificate)) {
         SPITAJAX_ERROR(1, "Cannot verify your certificate, please regenerate ".
-			  "your certificate at your home portal.");
+                       "your certificate at your home portal (typically ".
+                       "this would be https://portal.geni.net/). You must ".
+                       "also flush your old certificate from ".
+                       "from the Geni Authorization Tool.");
         return;
     }
 
@@ -490,7 +493,7 @@ function VerifyLocalUser($user, $cert)
     chmod($certfile, 0666);
     
     $retval = SUEXEC("nobody", "nobody", "webverifycert $args $certfile",
-		     SUEXEC_ACTION_CONTINUE);
+		     SUEXEC_ACTION_IGNORE);
     unlink($certfile);
     if ($retval)
 	return -1;