You can debug this by looking at the request Mech sends and checking to see that your expected credentials are in it. The debugger can be handy for this.