user can change now password and username