adding flash message and validation in password change