fixed error messaging on invalid login