bug fix: changing password was buggy