finished user changes password feature