added password change (need to fix query)