Add change password functionallity to user + fix routes