changed return strings for invalid logins