Test invalid credentials as well as expired and bad scopes
typo