added break before password change to show_user()