adds test for wrong password