temporary fix for changing passwords, will fix later, side note: still not hashed