During 4.5 development we encountered a number of regressions in the login_password handler breaking both WebUI login (#6739) and, potentially, third-party tools consuming our JSON-RPC API and using simple auth.

We could easily implement some thin wrapper around python-requests which uses simple auth against the master/replica and run some simple command (e.g. user_show) to verify that password login works (PoC provided by @pvoborni).

This server two-fold purposes:

• catch regressions
• tests new features such as #6343