Make error message the same for wrong username and wrong password
Use the same error message for wrong username as for wrong password (fixes #2423)