adding scenarios for correct and incorrect credentials