Fixed Devise flash for invalid credentials

* Users will be informed they entered an invalid **username** or
  password, not an invalid **email** or password.
* Fixes #6 

For future reference, locales can be used to easily customize Devise flashes: https://github.com/plataformatec/devise/blob/master/config/locales/en.yml