test bad credentials for errors