Currently (pending #121) we show a login failure message. Do we want to show more detail? Note that this is considered a security risk, so we may prefer to leave as is.