SQL - Best way to limit access to small number of tables
Just place a DENY ALL  on the table for that user. DENYs are always evaluated first, and will override the GRANT off SELECT to the overall schema:

DENY ALL ON [schema].[object] TO {user_name}


There is no reason to move the login table into a separate schema.