redirect after inpout wrong password to / and test for it