Friendly invalid password

Updated user prompt for invalid password for clarity.
This should be `Incorrect username or password, please try again` - on a reg-only server you'd get this response attempting to log in when the username doesn't exist.