password resets controller: commence specs