Fix: add password change