Wrong passwords generate InvalidCredentialsException