Return 401 when the user says it's admin with an incorrect password.
Change test to test it.