finishing up change pw. seems to work fine, need to write tests