adds tests for disabling passwords in login + xml