On login failure, show the sanitized AuthenticationException message, to prevent the possibility of disclosing sensitive information if some other exception is thrown while logging in.