added password change funcitonality to backend