When I created the validate server behavior, at first I used the "dynamic" (lightening bolt) menu to choose the recoord set and the code looked like this:
I also tried changing $rows_ to $totalRows_ as you described but it did not help.
I moved the Validate code block back down to where it was previously. Now I can log in again with a good email and password, but still when I use a bad email it sends me to the bad password page.
I've attached the new version here also.