added current password verification