add specs for 3.3 password change related stuff