Handle bad credentials properly