move password settings to another page
add integration tests for settings