added error msg when login is incorrect