On activating local accounts, the error message didn't differentiate
between using a wrong or expired token, or a wrong password.
The result could already be obtained from the behaviour (different
screens were presented), but the error message was misleading and lead
to confusion for new users on Codeberg.

Now, entering a wrong password for a valid token prints a different
error message.