added test for password verification