For failed attempts we need to receive appropriate 40x responses based on the type of error. We want to verify the logout and the login status of the current user..