Fixed a bug - an exception (Can't mass-assign protected attributes: username) was thrown when login failed.
Fixed a bug - warning for failed login should say "username" instead of "email".