Improved HTTP exceptions and fixed response for login failure
Updated to-do