status code 400 on login failure