test(auth): added test for auth with wrong credentials