testing a devise password change bug in isolation