Additional password reset unit tests for API and REST
 - strongloop/loopback#944