test to check if password is not displayed - that should have been in georglangs pull request 2