added password changing