password changing working properly with authentication