better error handling on wrong password/username