authentication errors only report invalid email or password