added a bad_login template and the CSS for the message.  Returning the exact same error now for a nonexistent account and a bad password