test updated to include existing email but invalid password