Work on webservices

- New method to change password and update contact
- restrict permission when get contact