User cannot sign in with invalid password