requiring login for change password.