update the test users
disable empty passwords
Merge branch 'master' of heroku.com:yana169