Build a decision table for the login rules

The QA Practice Hub seeds four users:

POST /api/auth/login takes { email, password }. Observed behaviour:

• A malformed email returns 422 VALIDATION_ERROR.
• Wrong password returns 401 INVALID_CREDENTIALS.
• An inactive account returns 401 INVALID_CREDENTIALS even with the correct password.
• Success returns 200 with a bearer token and a user object.

Your task: build the decision table, collapse it to the tests you would run, and answer the follow-up: "An unknown email and a wrong password both return the same 401. Is that a defect?"