Merge pull request #26 from shivrai/fix/login_hints

Avoid hints for an invalid password attempt

flash_cards.py

@@ -260,9 +260,9 @@ def login():
     error = None
     if request.method == 'POST':
         if request.form['username'] != app.config['USERNAME']:
-            error = 'Invalid username'
+            error = 'Invalid username or password!'
         elif request.form['password'] != app.config['PASSWORD']:
-            error = 'Invalid password'
+            error = 'Invalid username or password!'
         else:
             session['logged_in'] = True
             session.permanent = True  # stay logged in