I believe we already agreed that you should not distinguish error message for login and password!