added change password ability for users