change password, fixed bug with login