On login failure, show the sanitized AuthenticationException message, to prevent the possibility of disclosing sensitive information if some other exception is thrown while logging in.
Merge branch 'master' into 2.0