change password is now functional