bugfix for setting password, added confirmation notice in profile after redirect