Added model tests for invalid input

Two examples currently fail: one for User (blank password) and one for
PasswordResetRequest (blank code). I'll fix this ASAP.
models_spec example fix
Models::User now rejects empty password