password_auth_providers
These things seemed to be completely untested, so I added a load of tests for them.