Merge pull request #139 from macsj200/patch-2

Genericize invalid username or password message

config/strategies/local.js

@@ -22,17 +22,17 @@ module.exports = function() {
 				}
 				if (!user) {
 					return done(null, false, {
-						message: 'Unknown user'
+						message: 'Unknown user or invalid password'
 					});
 				}
 				if (!user.authenticate(password)) {
 					return done(null, false, {
-						message: 'Invalid password'
+						message: 'Unknown user or invalid password'
 					});
 				}
 
 				return done(null, user);
 			});
 		}
 	));
-};
+};