add passwords + tests for pw (failing still)