added password changing and confirmation of old passwords