test creating user and password validation