modified login failure behavior