When a login fails, the only message that appears is that the username and/or password are incorrect. In my opinion there should be an option to automatically reset the user's password.