I'm using auth0 to handle user login, and that's a message generated by their service. I agree it is very confusing, I'll see if there's a way to override it or disable it.