added some additional unit tests, took a first shot at password validation.