It would be nice if this test called a method here that checked that the user record looks correct: srp field removed, bcrypt field added.