fix api changePassword function