adding tests for the password and password_confirmation attributes