Don't allow a user to reuse a password

With test and PEP8 cleaning.
That's in the `setUp` method. I'll rewrite to make that more clear, though.