add password edit to auth controllers