confirm password is not returned from service at auth in test