diff --git a/tests/api-test.pl b/tests/api-test.pl
index f9068dd4..efbbf0fc 100644
--- a/tests/api-test.pl
+++ b/tests/api-test.pl
@@ -1,6 +1,6 @@
 use LWP::UserAgent;
 use JSON;
-use Test::Simple tests => 16;
+use Test::Simple tests => 17;
 
 my $ua = LWP::UserAgent->new;
 $ua->cookie_jar({});
@@ -17,6 +17,9 @@ sub request_json {
     return $res;
 }
 
+my $result = request_json({ uri => "/login", method => "POST", data => { username => "root", password => "wrong" } });
+ok($result->code() == 403, "Incorrect password rejected.");
+
 my $result = request_json({ uri => "/login", method => "POST", data => { username => "root", password => "foobar" } });
 
 my $user = decode_json($result->content());