Update: errors

Remember to keep these errors the same, because if you say: password
wrong, then the attacker might know that username is correct and start
cracking password only for that account