more stuff done by JS in password change form