remove username hidden field from change password page
don't allow to order negative quantity or points