now supports changing password