fix change password frontend and logout without destroy session