philipn: add test to test password complexity