password resets controller specs done.

Finished up contexts with valid/invalid tokens