corrected change_password