CHANGED: try to explain user why authentication has failed