The message object we get back from meteor will look like this:

    error =     {
        error = 403;
        errorType = "Meteor.Error";
        message = "Incorrect password [403]";
        reason = "Incorrect password";
    };
    id = 52229dda183eb06;
    msg = result;

I think it might be safer to key off of the error code (403) instead of the reason string. Also, it would be great to upgarde the DDPAuthDelegate protocol's authenticationFailed callback to take the reason string so the implementation of the DDPAuthDelegate can optionally display that failure message to the user.