setup to change password doesn't have authentication