Added spec for GET /passwords; fixed testing bugs