Don't allow a user to reuse a password

With test and PEP8 cleaning.