check store in AuthenticatedSessionController, if you are trying to login the user by passing only the email it looks like something like this : $request->only('email'). this makes it fail even if the password is right.