change password accepts password confirmation