fixed password fields at change_password.html