change password bug fix. 

fix a bug which skip md5() when changing user's password.