This will always pass, even if the password wasn't changed--the .password filed returns the hashed value of the password.

I would suggest, however, parsing the password from the output through a regex ( e.g. `Generated new password for user 'u1': '22u!BA41yJ'`), and using to log in through the browser (use one of the functions in KALiteDistributedBrowserTestCase for that)