can we add a quick test for what happens when there are a different number of passwords from usernames? seems like a common case to have a few test users all with the same password, be nice to explicitly state that that works in the tests.