routes added for change password feature