NEW: users can change their pw and ip address restriction on registration