Security code: using old codes should be explained to the user

[g105b]

When a user logs in and is required to enter the email security confirmation code, when the user enters an old code or and expired code, the error message should explain this to them.

You've entered a previously used code. Security codes are only valid once, so you should have received a more recent email with a new code.

or

You've entered an expired code. Security codes are valid for 30 minutes. To receive a new code, please log in again (linked).