When he will authorize with the LoginId, you will receive the same errors as the ones you will use live (so with an INVALID_USERNAME code). You will have to ask the user his credentials again. It will still be the same LoginId but with an updated password.