check for incorrect username or password