add test for password(user model)