add tests for checked password readonly