log in with valid and invalid credentials