added password-reset specs