The RP under test passes if the second and third login attempts FAIL, possibly mentioning an invalid signature.