feature(auth) add warning about changing password