test user login but fail