adding code for user to change own password