also test for creation with username and password