3 ms·

Sounds like they need to add a spec where a valid user tries to login with an invalid password. That's quite embarrassing.