fix RefreshSessionUserChanges and ChangePassword