search user, changing password