again with the change password directive