Add spec test for password changing + email