users can only see "change pw" for themselves