using 'TEST_PASSWORD' (see 'login.tests.factories')