testing login validation