added message to change password