check password_change status code instead of type