changed user settings page to not show password