add: User can change her password, close #118