I think we can probably show a more helpful notification here. When a 401 is returned, I think we can make the assumption that the user has entered the wrong current password. When a 400 is returned, I think we can make the assumption that the user only has non-local loginIds and show an error for that as well.