account/settings page added with change password functionality