made login error message more vague so users cant use trial and error to find usernames that exist in the database