added password change functionality