Simplify the API test for invalidCredentials (removed create), move above REST calls for better grouping of tests
  - strongloop/loopback#944