fix bugs in "change user password"