user can now change their email and password