error handling when changing password