Fix account page forms & add account actions rspec

#5

app/controllers/users_controller.rb

@@ -19,6 +19,7 @@ class UsersController < ApplicationController
   def update
     authorize @user
 
+    @user.password_change_attempt = false
     if @user.update(user_params)
       redirect_to contests_path, notice: t("users.edit.notice")
     else
@@ -26,6 +27,18 @@ class UsersController < ApplicationController
     end
   end
 
+  def change_password
+    @user = User.find(params[:user_id])
+    authorize @user
+
+    @user.password_change_attempt = true
+    if @user.update(user_password_params)
+      redirect_to contests_path, notice: t("users.edit.notice")
+    else
+      render :edit, status: :unprocessable_entity
+    end
+  end
+
   def show
     authorize @user
 
@@ -89,6 +102,10 @@ class UsersController < ApplicationController
   end
 
   def user_params
-    params.expect(user: [ :username, :email_address, :lang, :password ])
+    params.expect(user: [ :username, :email_address, :lang ])
+  end
+
+  def user_password_params
+    params.expect(user: [ :password ])
   end
 end