test for bad password match