added negative login test