test MyController#password