Anonymous auth 401s skip the global message handler, so wrong credentials left the login form silent; surface the server detail. Co-authored-by: Cursor <cursoragent@cursor.com>