add password reset feature spec