When you type the wrong password into HubZilla...

You are not told the reason you weren’t able to login. I’m not sure if it’s supposed to be that way, but sounds like bad design to me. As usual confirmed with unmodified surf browser.