Even if the server responds with a 400, or other status code, the error message says that the password is wrong (which can be misleading to debug)