o Use generic bad username/password message instead of specific ones when
    the user uses incorrect data during login. Closes #3656.