prevent password entry on user change