I think this deserves a 500 and not just login error.