need a failing case as well, for example, one with a password with too few characters