added change password features
fixed bug that logged out users after incorrect password change