users can change password theirself. close #259