Clarification for option b: If the user name is not found, give an alert and there is no need to check the password. If the user name is found, but the password is incorrect, give an alert. In retrospect, this makes more sense than how it is worded in the book.