Protection against password attack

[The Wishmaster]

1. Log "password mismatch" or something like this if a user enters incorrect password.
2. Log "No such user", if a nonexistent user is trying to log in to the system.