added ability to change password