This only works if we have a second "login" object that was initialized with the wrong user/pass.