add password test and validation
add more tests for passwords and authentication