hash change password and username