Wrong message when using a String to verify credentials

Accordingly with previous discussions, we should avoid using String values when verifying credentials.

Beside that, when using the JDBC and LDAP realms, the message is wrong, indicating that String values are also supported.