fixed error message in users controller

proper error message displays now if the user enters an invalid password