When an account has a correct username and password and YOUR app says it’s wrong and you get emails detailing how you are at fault then isn’t it your job, your responsibility to fix it and ensure the same problem doesn’t happen again because that’s what a good company would do, but you aren’t a good company now are you 🙂