rm "change password" button and fix redirect after login