updated ability to allow all users to update their own password information