I don't have a good suggestion for the user_dropdown wait. We can't do it with the normal login function because that's also used in bad password tests, but for this case I think it's reasonable to expect that the credentials will always be valid and the user_dropdown wait should always succeed.

I think you can probably get rid of the `FIXME` and add a note in comments or docstring that this function assumes credentials are valid.