Add more thorough password reset tests