Call "badlogin" even when the username entered is invalid and the

"Always Prompt for Password" setting is set to "No".
This change enables the auto-hack-log, throttling, filtering, and banning
logic for these types of failed login attempts.