Add tests for bug #3.
Use more descriptive name for bug #2.
Require password with and without trailing slash. Fixes bug #3.