400 on hitting loginByPassword endpoint