s4: Add tests and 'must change password' flags in setpassword and newuser