turn off expand events
show correct error message on bad username/password