I did some research on the question why password hashing is done on the client in the tests, and found no good reason for that.  I therefore removed it (see https://github.com/apache/couchdb/pull/154), but would like to keep that change separate from this issue here.