included specs for hitting the password reset action for the doctor, removed the factory sequence for email as there was duplication errors, included the necessary permission for the guest to hit the new password creation action
forgot the inclusion of the create action in the array of permitted actions for the guest