allow changing of passwords