Fix incorrect username bug

Fixed the bug #25 (closed) which caused 500 Internal Server Error when attempting to log in with non-existing email address. Also changed the error messages "Incorrect username" and "Incorrect password" to "Incorrect username of password" for privacy reasons, as the old error could be used to reveal who's a user in the application and who's not. Also added some documentation to auth.py file.