removed canvas
added user password update feature