There should be some kind of error message to let the user know the username/password is incorrect if it is.
There should be some kind of error message to let the user know the username/password is incorrect if it is.