change password bug fix.

fix a bug which skip md5() when changing user's password.