adding feature test for failed login, removing redundant controller tests