change password function

not completed yet