initial move of change password feature to user flyout, still needs styling