Add proper tests; password checking