I believe we should have a different exception for situations like wrong credentials e.t.c.