password change page + tests