Use the same error message for wrong username as for wrong password (fixes #2423)