If two-factor is on for your account, you are asked for a code next.
A wrong email and a wrong password give the same answer on purpose. Saying which one was right hands over half of it.
No account yet? Start the trial
A forged signal is a funded account wiped. That is why every response your terminal receives is signed, and why the connector verifies it before it executes anything.