try to deal with /user/change_password