added invalid login test