fix sql bug
cleanup code, add password change test
move passwords to variables