move PasswordsController specs to the new appropiate location