updated user controller to not redirect users when they change their own password.