Add initial tests for password change and reset tokens