Change sign-in email/password errors to both use the same string.

* Closes #238.

When signing in, both an incorrect username and incorrect password will now return the same string to prevent this being used to determine if an email address is registered.