At the moment if simplexml_load_string() fails because of an invalid XML format supplied the user is given a username and password error. This is not ideal and therefore if this happens the error message reported should indicate an error with the supplied XML.