only allow editing password (not email)