add message if user forgets username and password