authenticates password test for sessions#create
changed authenticate password to denies invalid password test