login page now shows error message on bad creds