minor change user can see his password on account info.jsp