Account Harvesting Defenses
¨
Make sure that error message is the same
when a user types in an incorrect userID or
password
