We need to test that illegal password does not work!