test password avoid