state/api: enable password checking

environs/dummy/environs.go

 // The dummy provider implements an environment provider for testing
 // purposes, registered with environs under the name "dummy".
 //
 // The configuration YAML for the testing environment
 // must specify a "state-server" property with a boolean
 // value. If this is true, a state server will be started
 // the first time StateInfo is called on a newly reset environment.
 //
 // The configuration data also accepts a "broken" property
 // of type boolean. If this is non-empty, any operation
@@ skipping 442 matching lines @@
                 if err != nil {
                         return fmt.Errorf("cannot make bootstrap config: %v", err)
                 }
                 st, err := state.Initialize(info, cfg)
                 if err != nil {
                         panic(err)
                 }
                 if err := st.SetAdminMongoPassword(trivial.PasswordHash(password)); err != nil {
                         panic(err)
                 }
-                // TODO(rog) use hash of password when we can change passwords
-                // in the API
+                // TODO(rog) use hash of password when the juju API connection
+                // logic is done.
                 _, err = st.AddUser("admin", password)
                 if err != nil {
                         panic(err)
                 }
                 e.state.apiServer, err = api.NewServer(st, "localhost:0", []byte(testing.ServerCert), []byte(testing.ServerKey))
                 if err != nil {
                         panic(err)
                 }
                 e.state.apiState = st
         }
@@ skipping 283 matching lines @@
 // time.Durations into this value.
 var providerDelay time.Duration
 
 // pause execution to simulate the latency of a real provider
 func delay() {
         if providerDelay > 0 {
                 log.Printf("environs/dummy: pausing for %v", providerDelay)
                 <-time.After(providerDelay)
         }
 }