changed error message to 'Invalid email or password'