password change, closes #66