test(auth): added test for auth with wrong credentials

close #157