Update a2.html

Closes OWASP#98

app/views/tutorial/a2.html

@@ -247,7 +247,6 @@ <h3 class="panel-title">How Do I Prevent It?</h3>
                         <p>
                             <ul>
                                 <li>For additional protection against brute forcing, enforce account disabling after an established number of invalid login attempts (e.g., five attempts is common). The account must be disabled for a period of time sufficient to discourage brute force guessing of credentials, but not so long as to allow for a denial-of-service attack to be performed.</li>
-                                <li>Authentication failure responses should not indicate which part of the authentication data was incorrect. For example, instead of "Invalid username" or "Invalid password", just use "Invalid username and/or password" for both. Error responses must be truly identical in both display and source code</li>
                                 <li>Only send non-temporary passwords over an encrypted connection or as encrypted data, such as in an encrypted email. Temporary passwords associated with email resets may be an exception. Enforce the changing of temporary passwords on the next use. Temporary passwords and links should have a short expiration time.</li>
                             </ul>
                     </div>
@@ -279,4 +278,4 @@ <h3 class="panel-title">Source Code Example</h3>
 
 </div>
 <!-- end accordions -->
-{% endblock %}
+{% endblock %}