Add some explicit tests for crypto/password.js
Add some more invalid-email test cases
Add a test for KeyFetchToken.fromId