Change the password rules to a custom validator requiring a special character. Try to save. Password changing fails silently.
In between validate and save, it changes the password to the md5 string. When we change the password validator to a type that does not fit the md5 characteristics, this will cause the save to fail. Because the save isn't tested, the redirect statement is still executed, even though because we need to show the errors on the save form.
Change the password rules to a custom validator requiring a special character. Try to save. Password changing fails silently.
In between validate and save, it changes the password to the md5 string. When we change the password validator to a type that does not fit the md5 characteristics, this will cause the save to fail. Because the save isn't tested, the redirect statement is still executed, even though because we need to show the errors on the save form.