[login] show right message when wrong user/password