halfway done with change password