first, construct a client that send connect request, with wrong password then publish message expect to publish fail actually, publish success.  also, a client can publish message without connect request. 