change password implemented

added functionality for a user to change his own password (only when
logged in). this prevents users from changing others' passwords.