Fix hardcoded password value in API tests