fixed #21. Accounts that are unverified should be able to log in
fixed error handling of auth exception