better auth support and change password capability