handle bad login/pwd