added change password functionality