user password verification and tests