create wrong login functionality - now user can login via web sockets with local strategy