make use of the change password directive