Add a warning about reuse of codes.

Signed-off-by: brian m. carlson <sandals@crustytoothpaste.net>
Add a test for mismatched passwords.

Signed-off-by: brian m. carlson <sandals@crustytoothpaste.net>