fixed change_password