test for discouraging reuse of email in password