added test for users password self-management, fixes #307
no-roles workaround again