adding password change to user module