fix(auth): fixing password change