Added password to the user factory
Added a current_user method to the api
Securing reset password params
Added test for reset password