Show a popup if the provided secret is invalid

Addresses #18