Add change_password method to User model