test changing password on an user with no local auth strategy