better login error msg, with api access request