missing test for user change password