add schema check to changePassword