Remove undefined 'msg' usage

In refactoring out the bad credentials check,
the "msg" variable is no longer in the current
scope.