User can log in with matching password

This leaves the system in a bit of a broken state since everyone
can log in. This will be fixed when we implement log in with
incorrect password story.
Do not allow logging in with invalid password