change password is wroking for user
user can change password