fix #278 (confusing/partly broken /changepassword[2])