test(login): changed expected status code from 401 to 400