He's just trying to help.

It looks like you're missing code in the users.php file, something along the lines of

Should be in there somewhere, because otherwise it's trying to log people in even if they haven't submitted the form, and in addition since the form is being displayed regardless of the submission you can't then set any headers afterwards (the location, etc).
-m