Login doesn't work if you connect to the server using the wrong host alias
you have to connect to vtiger with an exact match to $site_URL if you connect to the IP address rather than the domain name, or have multiple domains mapped, or connect over https rather than http it gives a login page then an illegal request page. It would be more friendly to redirect the user to $site_URL if you open up the login page from the wrong place.