dsdb: collapse wrong password and no-password-hash errors into one handler