Failed logins should return "Wrong username and/or password"

[wlln]

At the moment, if an invalid username/email is used to log in, codabench returns "User does not exist".
If a wrong password is used, it returns "invalid credentials".

The message should be the same so that it does not give attackers information.