password change fixed to check current password