handle wrong authentication and wrong account number more gracefully