bugfix: change password in settings