Not found should say the same as wrong password

Keys `failure.invalid` and `failure.not_found_in_database` should give the same error message for security reasons.