added user password change functionality