Minor Description
PasswordHistory.updatePasswordHistory is defined to return true if:
returns true if the history is enabled, the new password is not included in the history and the history was successfully updated; false otherwise.
however, if the feature is enabled and shiftPasswordHistory doesn't perform the update, the method still returns true. instead shiftPasswordHistory should report if the history was updated and the return value should be respected by PasswordHistory.updatePasswordHistory.