Update unit test for BCrypt password strategy

* Move specs into a more logical directory
* Remove subject/before/let statements
* Extract common code into scoped methods