flash a message about login failure