fixed password test so it doesn't test the confirmation as well