adds test for short password, completes section 6.3.3