add unit test to verify password complexity scoring