make change password vs add password a little cleaner