user can enter a new password