corrected user in change_password