scenario: attempt to log in with an invalid password