snapshot-3 - reworded bad auth scenario