Check to ensure account really is locked
Ensure bad password fails.