User submits incorrect password spec and implementation