now we handle the case 'wrong credential'
and we've moved authentication code to auth module