specs for User.try_to_login