don't fail on "bad signature" during login. Most likely this happens because

the login password changed at the user back-end (e.g ldap). Such failures will
be handled after login correctly by allowing the user to adjust the passwords