verify and change password