BONUS: assert that the password did change from previous value?