We don't want the user to see the original exception message or detail, only a single string of different message is needed.
For example, the user shall see "username or password is wrong, access denied" when failed to log on, not a "server side error".
If the example is really needed, we will provide it in a day or two.