move the weak password logic to it's own file add another weak password test case and split the test function