Do not echo the password entered by the user
Inform user when login credentials are invalid