working change password and image upload