changes to password controller