Genericize invalid username or password message

See [issue 133](https://github.com/meanjs/mean/issues/133):
If the user has an invalid username or password, the message returned should not specify if the username or password was incorrect, rather, the message should be generic for both cases.