added secrets.yml
update of schema
added password change
added test case for invalid current password
added more test specs