add password tests to check if valid