Added tests for User#password