changed path in passwords controller