add a test for garbage passwords and take out facebook authentication backend, for now