Do we need a password object for the `MockUser`? I don't think OneAndDone cares about the password.