add tests for password and password confirmation