password change improvements

resolves #74