remove redundant 'change password' action