bug fix: change user password + test