make all model fields readonly (its a log afterall)
log all exceptions in the PasswordChangeLog