updated main.js to handle change password via the account route