(Better) error messages for failed user login

Currently the user doesn't get a sensible error message when login failes. This should improve.