password not shown in plain text
must enter old password to change password
fix