changing password when reauthorizing existing user fixed