fix RSpec tests to accommodate new longer Devise password default