give user the possibility to change password