Allows users to change their password

actually those can be deleted for now. they're only used for password recovery, which isn't handled here yet