fix to auth route to show if the problem was username, not just password