user_views_test: ensure that we arent accidentally sending out the password hash and salt