change db lib to query by id or username
changing pwd depends on id instead of username