The original error message was "Not Authorized" but many users would say they
have the correct password, however in this particular check we know that the
server didn't like their credentials so we return "Invalid username or
password" instead.

Compiled locally.