password validation tests