Add BadCredentials to the controller and removed it from the view