diff --git a/pkg/server/handler.go b/pkg/server/handler.go
index 9a5866f..94b82ef 100644
--- a/pkg/server/handler.go
+++ b/pkg/server/handler.go
@@ -111,12 +111,13 @@ func loginHandler(ctx *Context) {
 		}
 		password := ctx.Form("password")
 		if data.User == "" || password == "" {
-			ctx.Error("empty user or password")
+			ctx.Error("empty username or password")
 			return
 		}
 		u, err := ctx.Srv.DB.Login(data.User, password)
 		if err != nil {
-			ctx.Error(err)
+			log.Println("login:", data.User, err)
+			ctx.Error("bad username or password")
 			return
 		}
 		if u.Secret == "" {