add a function to change user password