added 'change password' link to users profile page