fix handling of change password link