api/v0/users_test: test coverage for no password key in JSON POST/PUT