fixed change password bug