rolled back password validations, renamed logins_helper_spec to session_helper_spec