added another test which passes to not allow users to login with the wrong email address or password