add tests for password-related redisplay