set 0 vaue when field hidden
add change pass function
+ security for admin controller