More tests for authentication

added some more tests for authentication, to make sure that passwords aren't stored in plaintext (fails atm), and to make sure passwords are required for login.