user profile, password change & login_required decorator