Fixed Potential SQL Injection vulnerability in changePassword method

In the changePassword method their was no escaping on the $newPassword variable, just added it.
Merge pull request #2 from Kent55/patch-1

Fixed Potential SQL Injection vulnerability in changePassword method