adding feature test to check that a mistyped password does not work