added change_password, updated urls