Would it be a good idea to include a negative test making sure that settings can cause password mismatches as well as matches?