protection of changeing password page and method