fixed bug with change password