authentication service suspectible to fishing attack

PM cell returns "invalid user" or "invalid password" not invalid logon