tests: demo password in UserActions is encrypted