[change] the user password can also be changed by clients