test using client-provided in password callback