Move password reset functionality into service object
Move tests from user_spec to password_reset_spec