fix route to send error if the password and username do not match