Add test for bad credentials login