check for invalid email or password