test user sign in without valid credentials