change password link created on user profile page
change-password route
view user_change_password.php created
change password implemented in usercontroller
not all users can change their password