AuthenticationController: show friendlier hints...

...while not disclosing sensitive information. More to come once we
have our setup wizard.

fixes #6534