dev: restore/change password