further testing php / db interactions

gave bad pwd, making sure it wont succeed with bad input