rename all req.flash with info
add change password on profile page when the user is login