add action to change password