change password fixes and flow