We should re-use the `Invalid username or password` message from the main UI