users can now change password and upload photo
fixed typo