fix no change password with session