user that supplies a > 9 char password which happens to match a user's password when truncated to 8 chars.