oddly enough, I'm experiencing a similar problem (the site is in dev, so not publicly visible). However, disabling SSL did absolutely nothing. When I try to login, a bad user/pass gives me the appropriate message, but a valid user/pass just returns me to the login screen, with no error on the page, nor any errors (SSL or otherwise) in the web server logs.