snapshot-5 - reworded bad auth scenario here as well