better error message with bad JSON format and wrong password
bump