changing user creates a new user. changing password updates the password. note that if you change to a username that already exists, a new user with the same name is created. sub-optimal, but this is just for debug, so it can stay for now...