Genericize invalid username or password message

https://github.com/meanjs/mean/issues/133
The message given to the user upon an invalid login attempt, for security reasons, should not reveal that the username or password was incorrect.  Rather, a generic message should be displayed when the username or password is incorrect.