move bad login to alert from hard error