fix password email formatting, add new test, and upgrade should.js