redirect to login page if changing own password, add comments