sending illegal username/password message
fixing login procedure