bugfix on password change