changing a users password

also fixed the terrible logic in UsersController