time-exchange-gr/oscurrency — Issue #78: make login failure message less informational
Author: 3point2
Created: 2012-01-23 21:25:22+00:00
State: open

we shouldn't specify if it was the username or password that's incorrect, just say 'there was a problem with your login'. this will prevent people from being able to determine if an account exists or not. note: check password reset submission. there might be an error message for non existent accounts.