fixed rspec password should be invalid bs