throw errors on bad logins