Merge "Incorrect Credentials" to have the same status code and message.

It is allowing for easier brute-force attacks to have "incorrect username" and "incorrect password" error's have different status codes and response messages.