Corrected spec for session password entry