Don't advise the specifics of login failure

Providing feedback about which particular detail is incorrect provides an additional bit of feedback to potential hackers, i.e. they now know that the user exists and can target the password.