updates to passwords_controller_spec