Expanded login test with wrong credentials
Added params to list() to be able to append parameters to the URL
Expanded user permission testcase