added controller tests for password reset