Login error handling message for invalid username

Username error message shows which user accounts are configured.
Attacker can guess the username. Message should be more generic so that
an attacker cannot guess a configured user account.