allow user to change password on user settings apge