make password-change template compatible with enforcing complexity