password验证失败时处理

@@ -217,10 +217,10 @@ const local = {
         passport.authenticate('local', (err, user) => {
             let loginSession = req.session.login;
 
-            if (err) {
+            if (err || !user) {
                 let obj = {
                     code: 400,
-                    message: err,
+                    message: err || '登录出错请重试',
                     data: ''
                 };