Implement `change_password`