I'd also test to make sure the user's password is now `password2`.