added user authentication and password change