fix bug in PasswordChangeSerializer