updates: add password change page