added error message when username & password are blank