Tests for user-change-password and force-password-change access rights