limitting password change to sys admins, logging password change attemps
fixed error messages on password changes