620 change user password

closes #620
We only want to send to the email on file, for security reasons