feat(account): user can now change his password