fixed change password, reset password