User can sign in with correct and incorrect credentials