test password mismatch