Updated user_spec for invalid password validation