add the change password function