Added password change method to user controller