better error message for no password or username