added change password action for user