users can now change their passwords and cancel their accounts