Restrict auth code to number and max to 6
Handle invalid login