Skip to:
Security issue: Announcing a user is locked even if password wrong
Reviewing this deeper - this is by design - it is correctly implemented.
Security issue: Announcing a user is locked even if password wrong