fixed bug on password change