show error message when the user enters invalid credentials