change password and other tweaks...still working on update user