add support for changing password