057eb9391a
Check pocketid_sub before hashed_password so users with a linked passkey (and hence a null hash) get the helpful message rather than "Invalid credentials". Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>