Prove the login really checks the password: a write exercise in test automation