allow passing a password hash through the base class, and tests to be sure they're passed to class instances