Added changelog for #15708 [ci skip]
Cleaned up the `has_secure_password` test cases

* Grouped the valid test cases in one place
* Make the length of the generated password obvious
* Removed two wrong (copy-and-pasted) test cases