If a user tries to log in with a non-existent username and password, what error should be returned from the backend to the frontend?.