status code should be 403
Merge pull request #5 from lholmquist/login_test

Status code for password change should be 403