adding basic changing password functionality