all tests pass, user can sign in with password, passwaord gets encrypted