check if a user already exists is now in the Service layer where it makes more sense. first methods for change password created