moving vulnerability tests and adding password complexity test