Error Handling for Auth Failures

Provide actionable, non-revealing error feedback during failed authentication attempts.