added new spec to test invalid user sign in