test wrong password passed