added assertions to test_userpass_004 to check file permissions