Weird. Slingshot login on non-secure homepage works if flashblock off. Else https homepage logs in ok with flashblock enabled. Go figure.