changePassword checks if logged in first