Finally, someone has the guts to say, that failed logins should tell the user, what is wrong: username or password