The server used to respond with a generic 'error, contact admin' message which did not offer any hint what the error was. This happened even when the error could be easily corrected by the user (for example, if they chose a very common password).