Coded entire flow, tested invalid auth scenario.