user sees error when login fails