added more verbose output from auth failed