Temporary change for safety during transition: log error if decrypted…

… key does not match plaintext key and fall back to stored plaintext key

corehq/apps/users/models.py

@@ -3125,8 +3125,14 @@ def _generate_key(self):
     @property
     def plaintext_key(self):
         try:
-            return b64_aes_cbc_decrypt(self.encrypted_key)
-        except Exception:
+            decrypted_key = b64_aes_cbc_decrypt(self.encrypted_key)
+            if decrypted_key == self.key:
+                return decrypted_key
+            else:
+                logging.warning("Decrypted key does not match stored key for %s", self.name)
+                return self.key
+        except Exception as e:
+            logging.exception(f'Error getting decrypted key for {self.name}. {e}')
             return self.key
 
     @plaintext_key.setter