add password hashing test