fix bug: show change password page