user.checkPassword callback now takes two arguments: an error object and a user object; allowing the UI to differentiate between incorrect passwords and unknown users
Merge branch '20130710-better-login-errors'