- check that couchdb hashes plaintext passwords and strips out the
  password field before returning
- ensure that `type: :user` field is present
- check that PUTting new users handles multiple roles correctly