Add spec for User#change_password_allowed?; migrate testunit test