Request with invalid password returns 403