feat(auth): #1, alerts.add "wrong password"