enable a user to set their password