My guess is that you need a proper redirect for the message to appear
thanks for your answer. I didn't quite understand. What do you mean by
proper redirect? You press on the
loginbutton, then you get a notification that user/password is invalid and you should stay on the same page.