putting api in place for changing the password