Its an existing message, and can be triggered only by a buggy strongops api server, which Edmond was dealing with a lot during initial implementation. I want to resist the urge to completely overhaul this file, its about 1/3 dead code at this point. I could change this to an assert, but the output would be sucky, and the honest "sorry, our api server is returning invalid data, but we are pretty sure your password is good, if that makes you feel better" seems equally sucky.