Find account record from resourceful route when user model is overridden

The password reset function breaks when the user model is overridden, as the record ID from the resourceful route is expected to be available as `:user_id` but instead is e.g. `:person_id`

This corrects that.

I'm not wild about the dummy class definitions in the password controller spec file; suggestions for improving that aspect welcomed.