1) Login with invalid credentials 2) NotAuthorized result is returned from the API 3) Now login with the valid credentials 4) Still the result is returned as 'NotAuthorized'