fixes #4 add notification msgs on bad password