spec for PasswordsController
more spec for PasswordsController: update action