change user and password first