test for password