username/password pairs were incorrect. The authentication manager has "user" and "password", so those credentials should be allowed to get the actual message.