fixed lack of proper password validation

Author: konradoboza

src/lib/Mutation/AuthenticationMutation.php

@@ -38,10 +38,16 @@ public function createToken(Argument $args): array
 
         try {
             $user = $this->userService->loadUserByLogin($args['username']);
-            $this->userService->checkUserCredentials($user, $args['password']);
         } catch (NotFoundException) {
             return [
-                'message' => 'Wrong username or password',
+                'message' => 'Wrong username',
+                'token' => null,
+            ];
+        }
+
+        if (!$this->userService->checkUserCredentials($user, $args['password'])) {
+            return [
+                'message' => 'Wrong password',
                 'token' => null,
             ];
         }