Add proper responses to expected errors

Logging in with an non-confirmed email address should show a prompt that the user does not have a confirmed email address. Similarly, logging in with an incorrect email or password should also show the user why their login failed instead of saying "Uh-oh, something went wrong: Bad Request."