username and password rest tests