BI Platform 4.5 and password changes

I installed the BI server CE 4.5.0 stable along with the administration console. Everything is on one host.
1. Started BI server and Admin Console (PAC).
2. Connected to PAC. Changed password of suzy to suzy1.
3. Pentaho User Console (PUC) login as suzy/suzy1 SUCCESS. Logged out.
4. Connected to PAC. Changed password of suzy to suzy2.
5. PUC login as suzy/suzy2 FAILED. PUC login as suzy/suzy1 SUCCESS.
6. Restarted BI server.
7. PUC login as suzy/suzy1 FAILED. PUC login as suzy/suzy2 SUCCESS.
So it appears that using the default setup of the BI server (hibernate, hsqldb), the server caches the user and role information once, then never refreshes the cache. Is that a correct assessment? Is there a way to disable this mechanism such that the server always fetches user and role information from the database everytime a user attempts to login?