offer change password only when the action is supported by the user backend