change password works correctly now