# user.rb
validates_each :password do |record, attr, value|
  record.errors.add(attr, 'cannot be the same as original password.') if User::encrypt(value, record.salt) == record.crypted_password
end

# user_spec.rb
    it 'are the same as the original password' do
      # pending
      @admin.password_confirmation = @admin.password = 'currentPassword1'
      # @admin.send(:validate) # @admin.save doesn't work for some reason
      @admin.save!
      # puts @admin.errors.inspect.gsub( /</, "<" )
      p @admin.errors
      @admin.should be_valid

      @admin.password_confirmation = @admin.password = 'currentPassword1'
      @admin.save!
      p @admin.errors
      # @user.should have(1).error_on(:password)
      @admin.should_not be_valid
    end