When you use HTTP access controls, the browser handles the interface, and I don't believe there are any hooks into it. You are stuck with what the browser wants to display.
If you do your own verification using server-side scripting, then you can create your own login page and have full control over everything. There are a thousand tutorials on session management with CGI, just use the search box on this site.