changed: enabled password update in API