fixed password change
added password confirmation field and status messages into settings