added password checks & tests