added a test for an invalid login