tested and fixed changepassword.php