fixed bad credentials message