test bad credentials