add passwd op, update changelog