fixed bugs on password change