I think you should be able to just leave out the password, and then use `self.bad_user.password` to use the auto-generated one.

Also, unless you need the specific username, you could leave that out as well (although perhaps it makes debugging easier).