Making the login controller return an error if the user isn't found or a password is wrong. This will be helpful later and partially addresses OSCPA/Store-Pathfix#100.