update password resets controller spec