Add spec of having invalid_credentials