base version of password change functionality