covered changePassword method in authSpec