Merge pull request #139 from macsj200/patch-2

Genericize invalid username or password message

config/strategies/local.js

@@ -22,12 +22,12 @@ module.exports = function() {
 				}
 				if (!user) {
 					return done(null, false, {
-						message: 'Unknown user'
+						message: 'Unknown user or invalid password'
 					});
 				}
 				if (!user.authenticate(password)) {
 					return done(null, false, {
-						message: 'Invalid password'
+						message: 'Unknown user or invalid password'
 					});
 				}
 
@@ -35,4 +35,4 @@ module.exports = function() {
 			});
 		}
 	));
-};
+};