pull password scenarios into their own file