handle invalid fileid and wrong password better