allows users to change password and upload photo