nicer output on incorrect credentials