* change testing password policy to be deterministic * fix panic * test password against rules * improve error message * make test password gen more random * fix check on test password length