Add user specs for password reset