Add test on wrong username or password

[tonyyang-svail]

Let root:root be the only valid user.

To solve this issue, we need to

1. Enable authorization check on the server side
2. Handling wrong username/password error on the client side