fixed password change bug