added a feature spec for updating a forgotten password