Return 400 response on login fail