added specs for password reset
added instructions in README