I can return either null or user. How can I set up my user errors, for example, "invalid data" or "the user does not exist". Or are these the very restrictions that are indicated in the warning in the documentation about Credentials provider