better UX for user password change