change password shows only for the owner