allow principals to change their password