@Test
public void blowsUpWhenUserIsInvalid() {

  try {
    authenticationService.authenticate(username, password);
    expectFailing(UnauthorizedAccessException.class);
  } catch (UnauthorizedAccessException e) {
    assertThat(e.getMessage()).isEqualTo("No user matches username " + username + " and password");
  }
}