fixing scopes test: test setup allows empty password