fix bug where we were not using secure password in test