changing the wrong password test to be more explicitely wrong