test for stripping passwords