Restrict test to real login response