Give WRONG_PASSWORD even if the user doesn't exist

Signed-off-by: Sam Phippen <samphippen@googlemail.com>